216.73.216.197

Russian Military Cyber Actors Target US and Global Critical Infrastructure

· Published 09/09/2024 08:02 · Modified 09/09/2024 08:30

Export JSON

Essential information

Published
09/09/2024 08:02
Modified
09/09/2024 08:30
Tags
2024-09-09 cadet blizzard ember bear frozenvista gru unit 29155 uac-0056 unc2589 whispergate
Related entities
10 vulnerabilities (cve), 50 observables, 25 techniques (mitre), 1 malware

Description

The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes of espionage, sabotage, and reputational harm since at least 2020. cyber actors began deploying the destructive malware against multiple Ukrainian victim organizations as early as January 13, 2022. These cyber actors are separate from other known and more established GRU-affiliated cyber groups, such as Unit 26165 and Unit 74455.

Related entities

Vulnerabilities, IOCs, intrusion sets, MITRE techniques and other entities referenced in this report.

External references